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Abstract 

We explore the view that coordinated behavior is driven by the 
social constraints (e.g. obligations and interdictions) that agents in 
organizations are subject to. In this framework, agents adopt those 
goals that are requested by their obligations, kno\nng that not ful- . 
filling obligations induces a price to pay or a loss of utility. Based 
on this idea we build an integrated agent coordination system where 
we represent the organization, the roles played by agents, the obliga- 
tions imposed among roles, the goals and the plans that agents may 
adopt. To consistently update an agent's obligations and interdictions 
we present an incremental propagation method that also helps with 
detecting and deciding between conflicting obligations. One strength 
of this method is that it supports a generic coordination method based 
on exchanging and locally propagating obligations and interdictions. 
Once a goal adopted, a special brand of plans, conversation plans, are 
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available to the agents for effectively carrying out coordinated action. 
We Illustrate the framework with examples from service provisioning 
in telecommunication networks and supply chain integration. 

1 Intrpduction and Motivation 

To biiild autonomous agents that work coordinately in a dynamically chang- 
ing world, one of the first things we have to understand is how an agent 
chooses a particular course of action and how its choices change in face of 
events happening in the world. In this paper we present a framework that an- 
swers this question by construing agents as rational decision makers that exist 
within organizations. Organizations are systems that constrain the actions 
of member agents by imposing mutual obligations and interdictions. The as- 
sociation of obligations and interdictions is mediated by the roles agents play 
in the organization. For example, when an agent joins a software production 
organization in the system administrator role, he becomes part of a spe- 
cific constraining web of mutual obligations, interdictions and permissions 
- social constraints or laws - that link him as a system administrator to 
developers, managers and every other role and member of the organization. 
Not fulfilling an obligation or interdiction is sanctioned by paying a cost or 
by a loss of utility, which allows an agent to apply rational decision making 
when choosing what to do- 

Social laws cire objective forces that provide the ultimate motivation for 
coordinated action at the organization level and to a large extent determine 
the mental states at the individual agent level. Agents "desire** and ''in- 
tend'' the things that are requested by their current obligations, knowing 
that otherwise there will be a cost to pay. However, current models of collec- 
tive behavior largely ignore this aspect, trying to explain coordination solely 
from the perspective of socially unconstrained individuals. For this reason 
they often impose restrictive conditions that limit the scalability of the mod- 
els. For example, the Cohen-Levesque account of teamwork [7] requires team 
members to have the same mutual goal. But this is often not true in orga- 
nizations where agents have many different and sometimes conflicting goals. 
As a result, this model can not address coordinated behavior in the presence 
of multiple and possibly conflicting goaJs. 

Tb initiate a more realistic investigation of such social constraints and of 
their role in achieving coordinated behavior, we have built an agent coordina- 
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tion framework whose building blocks include the entities social constraints 
axe made of: agents, organizations, roles, obligations, interdictions, permis- 
sions, goals, constraints, plans, etc. In this framework agents determine 
what' obligations and interdictions currently apply and on this basis^decide 
on their goals, even when these obligations are in contradiction. Once an 
agent has chosen a goal, it selects a plan to carry it out. Plans axe described 
and executed in a previously reported framework [1] that explicitly repre- 
sents interactions with other agents by means of structured conversations 
involving communicative actions. Based on this previous framework, in this 
paper we present a first semantic and architectural account of representmg 
and reasoning with social constraints represented as obligations, permissions 
and interdictions (OPI-s) for coordinating agents in organizations. All the 
reported ideas have been implemented in an extended coordination language 
and are currently applied (amongst others) to supply chain integration and 
service provisioning in the telecommunications domain. 

2 Organizations and Roles 

At the highest level, agents coexist within organizations where they play 
various roles. Our coordination language allows organizations to be described 
as consisting of a set of roles filled by a number of agents. In the example 
below, customer, developer, help-desk etc. axe roles filled respectively by 
agents Customer, Bob, etc. 

(def-or^anization 01 

: roles ((customer Customer) 
(developer Bob) 
(help-desk-attendajit Bob) 
(development-manager Alice) 
(help-desk-manager John))) 

An agent can be a member of one or more organizations and in each of 
them it can play one or more roles. An agent is awaie of the existence of 
some of the other agents, but not necessarUy of all of them. Each agent has 
its local store of beliefs. , ,. • • \i 

A role describes a major function together with the obligations, inter- 
dictions and permissions attached to it. Roles can be organized hierar- 
chically (for example developer and development-manager would be both 
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development -member roles) and subsets of them may be declared as disjoint 
in that the same agent can not perform them (like help- desk-member and 
customer). For each role there may be a minimum and a maximum number 
of agents that can perform it (e.g. minimum and maximum 1 president). 

3 Obligation, Interdiction, Permission 

An agent al in role rl has an obligation towards an agent a2 in role r2 for 
achieving a goal G eiccording to some constraint C iff the non-performance 
by al of the required actions allows a2 to apply a sanction to al. Agent a2 
(who has authority) is not necessarily the beneficiary of executing G by the 
obliged agent (you may be obliged to your manager for helping a colleague), 
and one may be obliged to oneself (e.g. for the education of one's children). 

In our language we provide a construct for defining obligations generi- 
cally. The generic obligation exists between an : obliged and an : authority 
agent, when both are in specified roles, for achieving a goal that a third 
: beneficiary agent needs, whenever a given condition applies. The obliga- 
tion requires the obliged agent to achieve a goal under given constraints. For 
example: 

(def -obligation Reply-to-customer-request 
: obliged help-desk-attendant 
: authority help-* desk-manager 
: beneficiary customer 
: condition (received-request 

:from (agent -playing customer) 
:by (agent -playing help-desk-attendant)) 
:goal gReply-to-request 
: enforced (max-reply-time 2 hr)) 

The above requires the help-desk-attendant agent (the : obliged party) 
to reply to a request for support from the customer (the : beneficiary 
party) under the : authority of the help- desk-manager, in at most two 
units of time (a constraint on the goal gReply-to-request). This generic 
obligation becomes ax:tive when its condition is satisfied, in this case when the 
help-desk-attendant receives a request from the customer which requires 
a reply time not shorter than 2 units of time, because that is the best the 
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obligation requires the agent to do. men this happens (checked by evaluat- 
ing the : condition predicate), an actuaJ obligation .s created linking the 
help-desk-attendant to the customer aad applying to the actual request 
received (if many requests are received, as many actual obligations axe ere- 
Zed). Not shown in the example but allowed by the laoiguage axe auxiliary 
cond tions a^d actions that can post arbitrary obligations and :nterdi<:tjons 
defining the context in which the main obligation has to be carried out. The 
use of this will be illustrated later on. j . ,l .„ 

In exactly the same manner, our language defines generic and ax:tual m- 
terdictions (the performance of the goal is sanctioned) Perm.5«on5 (neith^ 
the performance nor non-performance are sanctioned) are not represented 
explicitly. Rather we use a default rule that considers everything not proven 
to be forbidden as permitted. Finally, the obligations, interdictions and per- 
missions (short OPI-s) of a role are inherited by sub-rol^. 

Semantics. We model OPI-s using the reduction of d«>ntic lo^c to dy- 
namic logic due to [11] in a multi-agent framework. Briefly, we define obh- 
g^on, interdiction Ld permission a. follows, where ^ denotes a vjolat.on 
by t of a constraint imposed by j wrt action or goal a (associated with a cost 
to be paid): 

^ pij a= la]'VV: « is forbidden by j to execute a. 

• f»i a = -'F'' a: i is permitted by j to execute at. 

• O'j a = F'H-a): i is obliged by j to execute a. 

As shown by [11], this reduction leads to a number of theorems which, 
as will be shown immediately, allow us to apply a constraint propagation 
method to infer new OPI-s from given ones in a goal network. The main are as 
foUows (indices dropped for clarity), where ; denotes sequential composition, 
U nondeterministic choice and & parallel composition of actions. 

}= F(a;/3) = [a]F0 (1) 
1= F(aU/?) =FaA F)9 (2) 
1= (FaV F^) D F(a&^) (3) 
1= 0(a;/?) = (OaA [a\Of3) (4) 
t (OaV Ofi) D 0(a U y9) (5) 
1= 0(a & /?) s (OaA 0/3) (6) 
t P(a;jS) = < « > P/3 (7) 
|=P(aU/?)s(PaVP/3)(8) 
)= P(a & i0) D (PaA Pi0) (9). 

Goal. According to the dynamic logic framework, goals are either atcmiG 
(non-decomposable), or compositions of type sequence, parallel or choice. 
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When the type indicates a composition, the goal will specify its components 
as sublaJs The description of goaJs also includes the constraants that can be 
TppHed to a goal a«d the optimizations that caa be requested. For example: 

(def-goal gReply-to-request 
:type choice 

rsubgoals (gReply-to-request-by-emaxl 
gReply-to-request-by-voace) 

:constr ain't s 

(max-reply-time req-max-reply-time) 
: optimizations (time accuracy)) 

This specifies that goal gReply-to-request is of choice^type a^d wm 
be satisfied by executing (at least) one of its two -^6°^^- J* ^ "^^^.^^ 
constrained by two constraints, max-reply-tame and req-m«-reply txme. 
Whatever plan is used for this goal, its execution may be optimized for both 
time and accuraqr. 

4 Conversation Plans 

Finally, agents have plans for achieving their goals. At the outermost level 
p a,^ spedfy the goal they can be used for, the constraants they gu^antee 
Ta Plan S gBeply-to-request may guarantee (n.ax-reply-tame 2 mxn) 
^.^.i Urns belppHclble for the above obligation) and the optin.i.ations that 
u l execution can provide. A plan is usable for a goal rf the requested 
constraints axe satisfied by the plan and preferably (but not necessary) if the 
plan execution can provide the requested optimizations ■ 
^ Wc call plans in our language convcrsaiion plans because they are de- 
scriptions of both how an agent acts locally and interacts with « her agents 
by means of communicative actions. A conversation plan cons^ts of states 
(wi h distinguished initial and final states) and rule governed transitions 
r^cthe; with a control mechanism and a local data base that ™aint^ 
tho state of the conversation. The execution state of a conversation plan is 
riaint^ned in actual conversations. For example, the conversation plan in 
Tgu c"Tho;s bow the customer interacts with the belp-deslc-attendant 
wT.cn requesting assistance. After maJcing the request for assistance the 
customer-conversation goes to state requested where it waits for the 
heS-deL-attendant to either acceptor reject. If thehelp-deslc-att^^ 




LegcDd: <ieceived messagoAaent messago 

Figure 1: The Customer-conversation 

(def-conversation-rnle 'hda-1 
: current-state 'stsurt 

•received '(request :from (customer ?c) ^ 

: content ((assistance PBX setup) ??)) 

" : next-state 'request-received 
isuch-that '(help-desk-attendant-available) 

: transmit '(accept :to ?c 

: conversation ?convn) 

:do ' (update- var ?conv '?customer ?c)) 

Figure 2: Conversation rule for help-desk-attendant 

accepts to provide assistance, the interaction enters an iterative pha^e in 
which the Customer a^ks questions and the help-desk-attendant responds 
This cycle can end only when the Customer decides to terminate it. In each 
non-final state conversation rules specify how the agent interprets incom- 
ine messages, how it updates its status ajid how it responds with outgoing 
messages. The laa.gaage in which messages arc expressed is a liberal form of 
KOML (81 but any communicative action language is usable. Figure 2 shows 
an example of conversation rule that a help-desk-attendant would use to 
respond to a request for assistance. . - j 

Prom the execution viewpoint, each conversation is a thread, an agent 
running aJl its conversations in parallel, with provisions for suspending a 
conversation while waiting for other conversations to finish or for events to 

Finally, conversation execution can be optimized by dynamically reorder- 
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ing rules m states to guarantee optimal satisfaction of criteria like execution 
time, solution accuracy, cost, etc. This is based on a decision theoretic ap- 
proach that views conversations as Markov decision processes. Full details 
about this plan execution and optimization framework axe available elsewhere 
[1]. 

5 Integrating Architecture 

The general control architecture integrating the above elements is shown in 
figure 3. Each agent operates in a loop where: 

1 Events (external or internal) axe sensed, like the arrival of messages 
expressing requests from other agents or the occurence of mternal con- 
ditions that prompt for some action to be taken. In figure 3, we have 
a message containing a request for assistance from the Customer ad- 
dressed to the help-desk-attendant. 

2 Sensed events may trigger new obligations and interdictions. These 
are placed in a newly created workspace called context, each new obli- 
gation being also placed in the agent's agenda, tnside each context, 
the consequences of the triggered obligations and interdictions are in- 
ferred by a deontic propagation process described in the next section. 
During propagation, conflicts between obligations and interdictions are 
detected and solved as shown in the next subsection. 

3 Next the agent selects an obligation from the agenda. This is either 
an obligation that has not been tackled before, or one which is under 
work by the agent. In the former case, the agent looks for a plan that 
can achieve the goal for which the obligation is formulated and initiates 
its execution. In the latter case, a plan has already been selected and 
partially executed, so the agent will just continue execution from where 
it was left. In the example in figure 3, the help-desk-attendant is 
obliged to respond to Customer's request by activating a plan for the 
gReply-to-request goal that can provide the requested response time. 

4. Finally, plan execution takes place in the context created for the trigger- 
ing event. This context contains specific obligations and interdictions 
that are enforced. The actions and subgoaJs involved in the plan are 



8 



(request Cusiomer 
Help-Desk- 



((assistance PBX seutp) 
"*^TOa-reply-umc 5 mio 
:optunixc accuracy^ 



Ltxra) Smt 



X 



Event 




Propagate Obligations 
and Tnterdictioitt in 
Context 




Use qualibOive and 
quantitative vlolaiion 



Select Obligaiiun 
and Goal 



Select 

Coctfdinaiion Plan 



Execote Plan 
in Context . 



Obliged tu reply to request 
in less than Sminand 
with best possible aocufacy 



Flan dial provides assisiai 
taking less ihan 5 min lo 
and upiimizablc for 



Ifxccoie permitted actions/subsoals 
In contexL Dd decision theoretic 
optbnizaiions. Use tegacy softwacc. 



Figure 3: Control Architecture 

subiect to the constraints this context in that the agent will not execute 
actions or subgoals that are forbidden in the context, will execute those 
that are obliged, and will have discretion over those that are permitted 
but not obliged. 
Next, we provide details about these steps, 

6 Deontic Constraint Propagation 

Each agent's goals form networks in which goals axe linked to their subgoals. 
Figure 4 shows a somewhat arbitrary such network m which gl is a choice 
between g2 and g3, g2 is a sequence containing g8, g3 ha^ g4 and g5 exe- 
cuting in parallel, etc. When events and local conditions trigger obhgations 
or interdictions, some of the goals in the network become obhged or forbid- 
den Because of the existing constraints amongst goals, this may change the 
deontic status of other goals in the network as well Deontic constraint prop- 
agation is the process by which given some initial deontic labelings of nodt^, 
other implied deontic labelings are inferred. One strengt^h of the dynamic 
logic reconstruction of deontic logic is that ba^ed on theorems like those 
shown in section 3 we can use a constraint propagation method to infer the 
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gl; choice 



i3: parallel 




Atserad: 
(forbidden g4) 
(obliged gS) 



choice 



Inferred: 
(forbidden g3) 
(foibidden g6) 
(foibidden gS) 

(forbidden g2) 

^fuomie 8^i««M™« (forbidden g I) 
(obliged g7) 

Figure 4: Deontic propagation in a goal network. 

deontic labelings impKed by an initial set of obligations and interdictions. 

Figure 4 illustrates this process using a goal network where we have mi- 
tiaUy asserted (forbidden g4) and (obliged g5) in some context C. For 
each of these assertions the propagation process traverses the network along 
supergoal and subgoaJ links and applies the deontic theorems listed previ- 
ously. For example, since g4 is a choice, making it forbidden imphes that 
all its alternatives axe also forbidden, according to theorem (2). This makes 
both g8 and g6 forbidden. Since g8 is forbidden, g2 is also forbidden as a 
sequence with one action forbidden (1). Propagating along supergoals, g3 
becomes forbidden because of g4 (3). Now both g2 and g3 are forbidden and 
since they axe all the alternatives of gl, gl becomes forbidden as well (2). 
When g5 is made obliged, since g6 is forbidden, it follows that g7 must be 
obliged (derived by working with the dynamic logic definition of obligation 
and interdiction). All these inferences are added to the C context. 

Sequential composition of subgoals creates a problem for deontic propa- 
gation in that if a (whole) sequence is forbidden (or obliged), the status of 
siibgoals (sequence members) can not be determined in advance. As stated 
by the previous deontic valitities, only after one subgoal has been executed 
we can post an interdiction (or obligation) for the remaining part of the se- 
quence Thus, goal execution has to be monitored and for goals that belong 
to sequences new propagations need to be performed when these goals are 

^"^^ Whtn goals are asserted as obUged or forbidden, we also allow specifying 
a cost of violating the obligation or interdiction. This helps us haxidle con- 
flicting situations. In figure 5 we assert every subgoal of a choice as forbidden 
with given qualitative costs. Then the choice goal is asserted as forbidden 
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Assened: 

g^^hoice (forbidden g2 xoa low) 

(foriiidden xost med) 
(ffltbidden 

(obliged gl xosi high) 
litfemd: 

_ (forbidden gl :cost low) 

g2:atomic g3:atoinic tfi- MO"* (obliged g2 :cost high) 

Figure 5: Deontic propagation with costs and conflicts. 

with a cost equal to the cost of the smallest cost alternative (this is just one 
possibility). If later the choice goal is asserted obliged wath a greater cost, 
fhen we propagate this upon the smaUest cost subgoal Now we have contar- 
dictory labelings for gl and s2, but since we also have the violation costs, the 
ienTis justified to do gl a.d gS (accepting their obligatory status) because 
thus it will incur a smaller penalty. We consider this not a^he defimtwe 
solution to the problem, but rather as our first shot at it Note that this 
scheme works with both quantitative and qualitative violation costs just as 
weU The architecture allows each agent to define the nature of violation 
costs it can handle and its own comparison and decision rules for these. 

7 Operation 

To see how the architecture operates, assume the help-desk-attendant 
receives a message from the customer requesting assistance for some product 
setup: 

(request :from (customer ?c) 

: content ((assistance PBX setup) 

•.satisfy (max-reply-time 5 min) 
: optimize (accuracy))) 

This matches the Reply-to-customer-request obligation of the agent 
in the help-desk-attendant role, placing this obligation on the agenda and 
asserting its goal, gBeply-to-request, - obHged in -^^'^f^^^^^ 
for dealing with this event. Assume further that this goal is a choice be- 
tween gReply-to-request-by-voice and SR^Ply-^^-^^^^^^-^r^^toi' 
The initial obligation, Reply-to-customer-request, like any obligation, 
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can contain predicates checking any relevant conditions and actions ajs«t- 
oTher goL as obliged or forbidden in the context of the ma.n obhga- 
t^n In ol ca.e, these conditions also check if the custoxner .s a VIP and 
"ok at the constraints and optimizations required. As the custonxer is a 
VIP flet's assume) and has stringent response time constraints the obhga. 
y L>,;H^ eReolv-to-request-by-email. Deontic propagation then in- 

a plS for gReply-to-reqnest and attempt to execute it. As this goal is 
: tSlM execution consists of cl^oosing at lea.t one alternative and 
cursfvei; executing it. But this choice must not violate the obligations a^ 
SSrdicLns that apply in the current context, hence the plan can only se- 
ergReply-to-r4uest-by-voice and execute it. In general, plans must 
iiSe su^goals thlt axe obliged, must not execute forbidden subgoals and 
have lattitude over permitted subgoals. ut„ 

Finally, the operational architecture keeps track of how ?bhgations a^ 
derived from events like received messages, how goak are derived from ob h- 
,.ions and pl^^^^^^^^ ^-ed^^;; ^^^^^ 

^d~ti:nr^^^^^^^^ aecisionsnike --acting an or^ or 

topping an interdiction because of a more important mcompatib e obLga- 
tTon In figure 4 for example, if (forbidden g4) ,s retracted al^ inferred 
aLtertions will also be retracted as they all rely on this premise. In this orga. 
Satn contexts axe represented as LTMS premise sets. For each obligation 
in the agenda it tackles, the agent has to switch to different context, which 
is adequately supported by the LTMS architecture [12]. 

8 An Application to Feature Interaction 

One strength of the approach is the principled way it supports coordination 
bv exchanging and propagating deontic constraints amongst agents. Sup- 
pose age^t^ 'requests something from agent B. A formulates its request m 
terms of a set of deontic constraints (obligations and interdictions) that B is 
alkTd to satisfy. B propagates these constraints locally, together with its own 
etit constfaint?, resolving any confUcts according to its own deosion pro- 
cedures and producing in the ena a context containing those constraints that 
h c^ (oTwLs to) satisfy. Then B satisfies those constraints by executing 
appropriate plans. 
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To see a first example of using this in practice, we consider the feature 
interaction problem in the telecommunications domain [4]. We assume A 
aoid B are agents responsible for establishing voice connections amongst^their 
users The creation and admmistration of connections can use various levels 
of functionality, or features, that provide different services to subscribers or 
the telephone administration. -i^ui^ 

Here are a few examples from the features that are usually available (mod- 
em telecommunication services may have many hundreds of features): 

• Incoming Call Screening: the calee will refuse all calls from callers in 
an incoming call screening list. 

• Call Forward: the calee will forward the incoming call to another num- 
ber. 

• Recall: if the calee is busy, the caUer will be called ba^k later when the 
calee becomes available. 

• Outgoing Call Screening: the caller does not allow to be connected to 
some specified directory numbers. 

The feature interaction problem is that often combinations of features 
interact in undcsired ways, affecting the intended functionality of the pr«y- 
vided services. For example, several combinations of the above features may 
interact in an undesired fashion. Incoming Call Screemng a^d Recall may 
conflict if Recall is done without checking that the number belongs to the 
incoming caU screening list - we shouldn't call back numbers that axe not ac- 
cepted iJ the first place. Similaxly, Call Forward Outgozng Call Screemng 
may conflict if a caller is forwarded to a number that it does not wish to be 

connected to. , , ^ • 

The deontic propagation framework caoi be used to solve such mteractions 
in a principled manner. When agent A wishes to connect to agent B, it^wJl 
provide to B a set of constraints that correspond to A's relevant features that 
B must consider. For example, if A has Outgoing Call Screening, it will send 
to B a hst of interdictions relative to the numbers that it doesn t allow. If 
B has Call Forward, A's interdictions will be used to forbid forwarding to 
A's undesired numbers. The propagation process described ,n the previous 
section is used as the generic mechanism to solve interactions among features 
described as deontic constraints. 
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(obliged ProccssIncomingCam 
(rorbldduiFrw#]) 
(forWdden AcceplCaU) 

(forbidden Recall) 
(oblie«d Frwil) 



. cale« received a ««n 
. requested liy caller 

- posted by calee, because caHer 

b in the incomSns eaO screening list 

- posted by caJee for the same reason 

- dcriTcd through propagotlon by caSmm 

as the way to satisfy all constraints. 
Calee thus forwards the calllo its 
second namber 



Figure 6: Deontic propagation appUed to feature interaction. 

For iUustration, figure 6 shows the inferences performed by a cal<^ B 
when receiving a call from A. A has Outgoing Call Screening for number #1, 
Id B hi Incorning Call Screening with A in its incon^mg s^^mg 
list As the caJee, B is obliged to Process the Incoming Call. This is a 
sequence where i;co.in6 Call Screening is the first goal. As -ch 
posted as obliged. When Incoming Call Screening is ^^f^^^^ 
Z interdiction for Accept Call and Recall in the current context, because A 
is on the black list. Then the next subgoaJ in the sequence, ^"^^'"^^S 
Answer is asserted a« obliged (.see theorem 4). This is a choice with the 
Lt two alternatives forbidden. Hence the first ^^^^^^^^^^^^ 
becomes obliged. But the first number to forwaxd to is forbidden because 
of caL's request. It follows that forwarding to the second number must be 
obliged, a.id this is what the calee, B wiU do. In conclusion, B do^ ^^^P* 
thS and does not set a callback to A if busy. B forwards the call to its 
second number, because the first is not acceptable to A. 
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9 Coordinating Teamwork in the Supply Chain 

Our second example deals with work coordination in the supply chain of 
global enterprises. The supply chain of a modem enterprise ,s a globally ex- 
fended network of suppliers, factories, waxehouses, distribution centers and 
retailers through which raw materials are acquired, transformed into prod- 
uctt divered'to customers, serviced and enhanced. The key to the effici^ 
operation of such a system is the tight coordination among ^-^P^;^;^^^; 
the dynamics of the enterprise and of the world market make this difficult, 
customers change or cancel o.ders, materials do -^^^^^ J^l^^^^O^ 
tion facilities fail, workers axe ill, etc. causing deviations from plan. Our 
go5 is to achieve coordinated behavior in dynamic systems of this kind by 
aoplyine our agent coordination technology. , , • • 

We have built several demonstration systems addressing supply chaiii is- 
sues In this section we briefly review one of them, focused on modeling 
e^ formation, team monitoring and teanri modification. The supi^y chain 
in this case consists of a Customer agent, a Logistics agent coordinating 
the joint effort axid several plants and transportation agents that partiapa^e 
in the joint work. One typical round of interactions m this setup starts with 
Ihe Customer sending axi RFQ (request for quotation, m which an mquiry is 
xnade about the cost of an order) to Logistics. To answer it Logxstics 
Sts up a^ appropriate run of its (local) scheduling software that decorn^ 
poses the order into parts doable by the production units m the network and 
Lo provides an estimation of whether the order can be executed g'V^ the 
current workload. If the result is positive, Logistics tries to obtain tenta. 
tive agreements from the other production units for executing their part. In 
this interaction, units are obhged to respond. If ^^^''^^'^f /^"."'j;^^^^^: 
formed, the Customer is informed that it can place an order. If 'hif^-PP^^^' 
Logistics starts another round of interactions m which it asks umts to com- 
mit to their part of the order. When a unit agrees, it acquires an obligation 
to execute its part. If everybody agrees, Logistics becomes obliged to the 
Customer for execution and the Customer to Logistics for paying Then 
Logistics starts coordinating the actual work by kicking off execution and 
monitoring its state. Units become obliged.to Logistics for informing about 
breakdowns or other events so that Logistics can try to replace a unit that 
can not finish successfully. If breakdowns occur and replacements can not 
satisfy the initial conditions of the order. Logistics tries to negotiate an 
alternative contract with the Customer, e.g. by relaxing some conditions. 
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We usually run the system with 5-8 agents and about 40-60 actual obli- 
gations and conversations each. The specification has about 10-20 generic 
obligations and conversation plans each with about 200 rules and utihty func- 
tioZ The scheduli ng software is an external process used by agents through 
an API AU this takes less than 3500 lines of code to describe m our language. 
We remark the concise ness of the representation given the coniplexity of the 
interactions and the fact that the size of this code does not depend on the 
number of agents and of actua 1 obligations and conversations, showing the 
flexibility and adaptability of the representation. 

10 Conclusions and Future Work 

We believe the major contribution of this work is a unitary coordination 
framework and language that goes from the fundamental social constraints 
Uke obligations and interdictions to the actual structured conversations by 
which agents directly interact. At the organization level, social constraants 
axe objective forces determining behavior for both human and artifici^ agents. 
As such social constraints are necessary components of any account of organi- 
zational behavior. At the individual agent level, obligations and mterdictions 
can be viewed as mental states much like beliefs, desires and intentions Our 
framework addresses both levels. By describing obligations and interdictions 
as relations among organization roles, we use them to shape social behav- 
ior By endowing each agent with an internal representation and an engine 
for' reasoning about their obligations and interdictions we effectively inte- 
grate obligations and interdictions with the agent's beliefs, goals and plans, 
Standing the DDI model in a new direction. Finally, by providing the tech- 
nology of deontic constraint propagation we provide a principled approach 
to "solving" coordination problems, in which agents exchange sets of deontic 
constraints which they then solve locaUy according to their own priorities 

and preferences. . . , 

Social constraints have been addressed to some extent previously. [15] 
describes a theory of coordination within social structur^ bmlt from roles 
among which permissions and responsibilities are defined. [14] study the 
general utility of social laws. [5] stresses the importance of obbgations m or- 
ganizations but does not advance operational architectures AOP [13] defines 
obligations locally, but does not really exploit them socially. [9] argues for 
the necessity of artificial agents with normative positions m today s Internet 
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world. Finally, [3] uses norms for enhancing the decision making capability 
of agents. But not for enhancing coordination. . ' . ^ , ^ 

Up to now, bur focus has been on prototyping our ideas into systems that 
can be quickly evaluated and "falsified" in applications. Evaluations based 
on several supply chain systems (of which we have reviewed one) as weU 
as on service provisioning systems for telecommunications have shown that 
the coordination language enabled us to quidcly prototype 
build running versions demonstrating the required behavior. Often, an initial 
(incomplete) version of the system has been built in a few days, enabbng 

lo immediately demonstrate its functionality. Moreover, we have found 
the approach explainable to and usable by industrial a^d other engineers 
interested in their own domain. For example, our latest supply chain system 
consisting of about 40 agents modeling a realistic enterprise that has sever^ 
plants distribution centers aad transportation facilities has been developed 
by an 'industrial engineer without prior programnung J^J^**^ 
of that, a prototype able to simulate the supply chain on a 100-150 weeks 
horizon during which thousands of plan executions take place has been built 

in about 3 months. * j- 4.1. ^ 4. 

As current and future work, we axe involved in understanding the extent 
to which our approach to coordination by exchanging and propagating deon- 
tic c onstraints can be used to solve the variety of feature interaction problems 
classified in the literature (4]. Feature interaction is not only a telecommu- 
nications problem, but a problem for service and systena creation m genial. 
,\s sur h, it is important to investigate general, principled solutions such as 
onr distributed deontic constraint propagation approach. . . / 

.\nother direction is using the representation of obhgations and mterdic^ 
t ions to build trusted and accountable agents that provide services in different 
<,r«*..izations. Besides actively reasoning about their obligations and inter- 
dictions when requested to provide services to internal or external customers, 
agents also use their representations of obligations to interact with human 
users in a manner that would prove them trustworthy. We regard this as an 
inM>ortant avenue for future researdi on agents. 
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